Loading npm security reports…

pinchtab@0.15.2: AI-agent control-surface risk | LPM Firewall

registry / pinchtab / 0.15.2

pinchtab@0.15.2

Browser control API for AI agents

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically writes a bundled skill into already-present directories for five unrelated AI-agent products. This changes those agents' available instructions without an explicit user command.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

npm postinstall during installation or update

Impact

Installed AI agents can load package-provided instructions from their control surfaces.

Mechanism

Automatic cross-agent skill-directory creation and file copying

Policy narrative

On npm installation, the postinstall hook downloads the package executable and then synchronizes the bundled Pinchtab skill. The synchronizer detects existing skill parents for Claude, OpenClaw, Cursor, Windsurf, and Codex, creates a pinchtab subdirectory where needed, and copies its files there. This is an unconsented install-time mutation of multiple foreign AI-agent control surfaces.

Rationale

The package has concrete postinstall code that writes its bundled instructions into several unrelated AI-agent skill directories. Safety-oriented skill content does not remove the unconsented cross-agent control-surface mutation.

Evidence

package.jsondist/src/postinstall.jsscripts/sync-skills.jsskills/pinchtab/SKILL.mddist/src/download.jsscripts/postinstall.jsskills/pinchtab$HOME/.claude/skills/pinchtab$HOME/.openclaw/workspace/.agents/skills/pinchtab

Source & flagged code

5 flagged

package.jsonView file

Lines 1-40json

1{

2 "name": "pinchtab",

3 "version": "0.15.2",

4 "description": "Browser control API for AI agents",

5 "main": "dist/src/index.js",

6 "types": "dist/src/index.d.ts",

7 "bin": {

8 "pinchtab": "bin/pinchtab"

9 },

10 "repository": "github:pinchtab/pinchtab",

11 "homepage": "https://github.com/pinchtab/pinchtab#readme",

12 "bugs": "https://github.com/pinchtab/pinchtab/issues",

13 "scripts": {

14 "lint": "eslint src tests scripts",

15 "format": "prettier --write src tests scripts",

16 "format:check": "prettier --check src tests scripts",

17 "stage:skills": "node scripts/stage-skills.js",

18 "build": "npm run lint && npm run format:check && tsc",

19 "test": "node --test 'dist/tests/**/*.test.js'",

20 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L20

21 "prepare": "npm run build",

22 "prepack": "npm run stage:skills"

23 },

24 "files": [

25 "dist/src",

26 "bin",

27 "scripts/postinstall.js",

28 "scripts/sync-skills.js",

29 "skills",

30 "LICENSE"

31 ],

32 "keywords": [

33 "browser",

34 "automation",

35 "api",

36 "agent",

37 "ai",

38 "headless",

39 "chromedp",

40 "stealth",

dist/src/download.jsView file

Lines 17-57javascript

17});

18var __importStar = (this && this.__importStar) || (function () {

19 var ownKeys = function(o) {

scripts/sync-skills.jsView file

Lines 20-60javascript

20 */

21function getBundledSkillsDir() {

22 const packagedDir = path.join(__dirname, '..', 'skills', SKILL_NAME);

23 if (fs.

dist/src/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = pinchtab@0.15.0 matchedIdentity = npm:cGluY2h0YWI:0.15.0 similarity = 0.625 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/src/index.jsView on unpkg